Infosec glossary entry

AAA

AAA:
Authentication, Authorization, and Accounting
aka. 3A

AAA refers to a framework used in network security and access control that encompasses three key components: Authentication, Authorization, and Accounting. Authentication is the process of verifying the identity of a user or device, ensuring that they are who they claim to be. This can involve various methods, such as passwords, biometrics, or security tokens. Once a user is authenticated, Authorization determines what resources or services the user is allowed to access, essentially granting permission based on predefined policies or roles.

Accounting, the third element of the AAA framework, involves tracking and recording user activities and resource usage within a system. This includes logging actions taken by users, which can be essential for compliance, auditing, and security monitoring. Together, these three components form a comprehensive approach to managing user access and maintaining security within information systems, especially in contexts like Security Operations Centers (SOC) where monitoring and compliance are critical.


is an architectural framework for configuring a set of three independent security functions in a consistent manner. AAA provides a modular way of performing authentication, authorization, and accounting services.
https://www.cisco.com/c/en/us/td/docs/routers/access/cisco_router_and_security_device_manager/24/software/user/guide/AAA.pdf

Related entries

By jean-christoph

March 5, 2022

accounting, authentication, authorization
Leave a Reply

Your email address will not be published. Required fields are marked

{"email":"Email address invalid","url":"Website address invalid","required":"Required field missing"}

this might interest you as well